You are not logged in.
Pages: 1
Good afternoon everyone,
We started a new project, in our company, using GLPI.
At this point, we are now able to authenticate ourselves to the application with domain accounts.
However, to make life easier for users, we intended to implement SSO "mechanism".
We have searched in several forums, but without success so far.
Our configuration is as follows:
Version GLPI: glpi-9.5.3
HTTP Server: Apache/2.4.41
OS: Ubuntu 20.04.1 LTS
DB: 10.3.25-MariaDB-0ubuntu0.20.04.1
Best regards
Offline
Hello,
For that we use a CAS server.
In GLPI it is configured in configuration>authentication>others.
You have to install phpcas, it is not included anymore.
is this what you are looking for ?
Best regards,
Offline
Hi
We're using PHP SAML plugin there and it works as expected. Configuration is easy (just the landing page and certificate), yet some care must be taken, because I haven't really discovered any way to bypass the SSO once it is enabled (one of my other posts on this forum) - and if something would just prevent authentication, then the only way I know is via direct GLPI database modification (to disable the plugin).
Offline
Good afternoon. Thanks for the answer.
It is a good solution. Do you have any example of configuration with Microsoft active directory ?.
Any tips?
Greetings
Hello,
For that we use a CAS server.
In GLPI it is configured in configuration>authentication>others.
You have to install phpcas, it is not included anymore.
is this what you are looking for ?Best regards,
Offline
Good afternoon. Thanks for the answer.
This plugin would also be interesting but we wanted to maintain the various types of authentication and not just SSO.
greetings
Hi
We're using PHP SAML plugin there and it works as expected. Configuration is easy (just the landing page and certificate), yet some care must be taken, because I haven't really discovered any way to bypass the SSO once it is enabled (one of my other posts on this forum) - and if something would just prevent authentication, then the only way I know is via direct GLPI database modification (to disable the plugin).
Offline
We user a reverse proxy (KEMP) in the past that authenticated the user and send the username/password as HTTP authentication to the backend GLPI server in the past.
Now I use Azure Application proxy to authenticate users against AzureAD. The Application proxy then sends the logon in the HTTP header (that feature is in public preview). GLPI then picks up the username through HTTP authentication again. The advantage on that is I have no open ports to my DC and I don't need LDAP/SAML etc that takes it's own kind of special config.
Offline
Thanks for the answer. We do not currently have a license for azure AD. But this solution is very interesting
Offline
Hi
We're using PHP SAML plugin there and it works as expected.
Is the PHP SAML plugin only available with a paid subscription ?
Offline
mklimasz wrote:Hi
We're using PHP SAML plugin there and it works as expected.
Is the PHP SAML plugin only available with a paid subscription ?
Hi there, I'm the plugin author and it was released AGPL - no subscription necessary. Happy to answer any questions.
Offline
Have good experiences with https://github.com/edgardmessias/glpi-singlesignon Esp. cause the SAML plugin isn't available for newer glpi releases
Last edited by Megachip (2022-10-31 14:25:24)
Offline
Hey! could you please provide us the configuration of adding a provider on this plusin. Also do you know what app permission to attribute for azure application while registering it for GLPI-SSO ?
Have good experiences with /github..../glpi-singlesignon Esp. cause the SAML plugin isn't available for newer glpi releases
Last edited by elprimo (2022-11-09 12:16:30)
Offline
oj69 wrote:mklimasz wrote:Hi
We're using PHP SAML plugin there and it works as expected.
Is the PHP SAML plugin only available with a paid subscription ?
Hi there, I'm the plugin author and it was released AGPL - no subscription necessary. Happy to answer any questions.
Hello, I'm the creator of the PHPSAML plugin that is available on the glpi-plugins site. The plugin implaments SAML authentication in GLPI and has several configuration options to make it flexible. Check out my repo at for the latest updates or if you have any issues.
Hi Derrick,
I've setup and used your plugin.
I'm using glpi v 10.0.0.6 and the plugin(1.2.1) doesn't seem to create a configuration node under setup, I have to access the configuration from the plugins page.
I noticed the plugin doesn't seem to pull the users firstname
I want to pull additional info from azure
I would like to pull additional attributes and user groups from azure.
I want to pull these groups into glpi groups so I can do different assignments based on groups.
Offline
I install PHP SAML plugin
Can you tell me why I get a blank page if I open GLPI_HOME/plugins/phpsaml/front/meta.php
All data is filled in GLPI_HOME/plugins/phpsaml/front/config.php
Last edited by shigol (2023-07-26 13:19:52)
Offline
Can you help me with plugin: glpi-singlesignon
Send a printout of how you used it to alcione-morais@hotmail.com
thank you very much
Offline
Hi there.
I have been maintaining the phpsaml repository for over a year now. My updated version should work on the latest glpi. github.com/DonutsNL/phpsaml
I have also been rewriting the plugin to utilize native glpi objects where possible. I could realy use some help with testing. The beta can be found here: github.com/DonutsNL/glpisaml
Regards, DonutsNL
Offline
H DonutsNL, hope you're still working on this, the link to github is down, found the repository at https://packagist.org/packages/donutsnl/glpisaml#v1.1.0
I'm trying to test it out but need some info...
Offline
Pages: 1